Privacy Policy

Last updated: March 1, 2026

1. Introduction

PixelFixer ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Data We Collect

2.1 Account Data

When you register, we collect your name, email address, and hashed password. If you enable two-factor authentication, we store encrypted TOTP secrets.

2.2 Usage Data

We collect information about how you interact with the Service, including pages visited, features used, timestamps, IP addresses, browser type, and operating system.

2.3 Bug Reports & Attachments

When you create bug reports, we store screenshots, annotations, URLs, browser metadata, and any comments or attachments you upload.

2.4 Cookies

We use essential cookies for authentication and preferences, and optional analytics cookies with your consent. See our Cookie Policy for details.

3. How We Use Your Data

• To provide and maintain the Service.
• To authenticate you and manage your sessions.
• To send transactional emails (password resets, notifications).
• To improve the Service through analytics (with consent).
• To enforce our Terms of Service and prevent abuse.
• To respond to support requests and legal obligations.

4. Data Sharing

We do not sell your personal data. We may share data with:

• Team members: Other members of your team can see shared projects, tasks, and comments.
• Service providers: Hosting (cloud infrastructure), email delivery, error tracking (Sentry), and analytics (PostHog, with consent).
• Legal requirements: If required by law, regulation, or legal process.

5. Data Storage & Security

Your data is stored on secure servers with encryption at rest and in transit. We implement industry-standard security measures including CSP headers, HSTS, rate limiting, input sanitization, and regular security audits. File attachments are stored in S3-compatible object storage with access controls.

6. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access: Request a copy of your personal data via Settings → Export Data.
• Rectification: Update your profile information in Settings.
• Erasure: Delete your account via Settings → Danger Zone.
• Portability: Export your data in JSON format.
• Object: Opt out of analytics cookies via the cookie consent banner.
• Restriction: Contact us to restrict processing of your data.

7. Data Retention

We retain your account data for as long as your account is active. Bug reports and attachments are retained per team settings. Upon account deletion, personal data is purged within 30 days. Anonymized analytics data may be retained indefinitely.

8. International Transfers

Your data may be processed in countries outside your jurisdiction. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place for any international transfers.

9. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification. The updated policy will be posted on this page with a new effective date.

11. Contact

For privacy-related questions or requests, contact our Data Protection Officer at privacy@pixelfixer.io or visit our Contact page.